Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Import all XML, CSV & TXT into WordPress 6.5.8 Clear all filters
TI-2022-02997 CVE-2022-3244 · GHSA-vj5x-x7x2-xq6v

Import all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation

Priority MEDIUM 53

The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allow any authenticated users to access some of the plugin features if they manage to get the related no…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00491 Published 2022-10-17 Fixed in 6.5.8 CWE-862
TI-2022-02996 CVE-2022-3243 · GHSA-5cp7-rvwq-5jc9

Import all XML, CSV & TXT into WordPress < 6.5.8 - Admin+ SQLi

Priority HIGH 73

The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before using them back SQL statements, leading to SQL injection exploitable by high privilege users such as…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01328 Published 2022-10-17 Fixed in 6.5.8 CWE-89